Digital Bazaar Node Forge vulnerabilities

1 vulnerability

Known vulnerabilities in Digital Bazaar Node Forge, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

PrioritiseCVE-2025-12816digital bazaar · forge +186 moreCVE-2025-12816An interpretation-conflict (CWE-436) vulnerability in node-forge versions 1.3.1 and earlier enables unauthenticated attackers to craft ASN.1 structures to desynchronize schema validations, yielding a semantic divergence that may bypass downstream cryptographic verifications and security decisions.CVSS8.6HighEPSS0.58%